Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1630/15274F0E114111EF8F17870FC4F9AE02/18141426114211EFA0FF3956C4F9AE02.roa
File:                     18141426114211EFA0FF3956C4F9AE02.roa (raw, json)
Hash identifier:          1d9W6Tsr70Wb8EKQalzs8u9YFdgb/HNvjPEJSIgdBmM=
Subject key identifier:   CC:FD:CD:16:A4:FD:88:A2:C1:27:2C:07:CE:48:02:FB:27:9C:4E:3F
Certificate issuer:       /CN=A91A1630/serialNumber=50E8F04B9008FEA1E5C31F64E763DADED253A60C
Certificate serial:       018B
Authority key identifier: 50:E8:F0:4B:90:08:FE:A1:E5:C3:1F:64:E7:63:DA:DE:D2:53:A6:0C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UOjwS5AI_qHlwx9k52Pa3tJTpgw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A1630/15274F0E114111EF8F17870FC4F9AE02/18141426114211EFA0FF3956C4F9AE02.roa
Signing time:             Mon 01 Jun 2026 05:36:21 +0000
ROA not before:           Mon 01 Jun 2026 05:36:21 +0000
ROA not after:            Tue 31 Aug 2027 00:00:00 +0000
asID:                     152850
IP address blocks:        103.154.192.0/23 maxlen: 23
                          103.154.192.0/24 maxlen: 24
                          103.154.193.0/24 maxlen: 24
                          2001:df3:cc40::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A1630/15274F0E114111EF8F17870FC4F9AE02/UOjwS5AI_qHlwx9k52Pa3tJTpgw.crl
                          rsync://rpki.apnic.net/member_repository/A91A1630/15274F0E114111EF8F17870FC4F9AE02/UOjwS5AI_qHlwx9k52Pa3tJTpgw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UOjwS5AI_qHlwx9k52Pa3tJTpgw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 04:27:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 395 (0x18b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A1630, serialNumber=50E8F04B9008FEA1E5C31F64E763DADED253A60C
        Validity
            Not Before: Jun  1 05:36:21 2026 GMT
            Not After : Aug 31 00:00:00 2027 GMT
        Subject: CN=6a1d1a55-4da4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:13:74:b5:54:20:34:94:ff:fd:96:bb:30:6f:
                    3c:f6:f1:93:bc:c3:f8:2b:73:0c:82:2f:31:bf:eb:
                    7f:b5:42:d6:11:d7:33:ad:f4:10:cd:8b:94:33:19:
                    86:d7:88:33:48:7a:a0:c8:42:0d:00:8f:27:ad:3d:
                    2d:1c:30:d3:ce:14:2b:84:5e:e5:81:62:7a:a4:4c:
                    7b:22:03:72:52:e3:ea:31:2a:e0:63:a9:88:8b:e6:
                    01:2f:0e:ed:dd:c2:23:fb:d4:79:b4:bf:d5:fd:d4:
                    36:c9:68:81:20:54:b5:51:30:f8:b1:8f:a9:0f:cb:
                    d8:9b:fc:16:5c:bc:a5:bb:65:19:60:82:f5:ec:f3:
                    ae:f6:0f:12:8d:4a:db:ec:75:60:ce:f1:12:9e:5e:
                    35:af:21:d7:26:d5:7c:87:22:2b:29:66:75:4f:24:
                    0d:2b:a2:44:0a:dd:50:db:04:5e:34:7d:6e:25:88:
                    18:b5:98:df:16:f9:c5:32:1a:cc:d3:cf:e6:d1:7f:
                    20:aa:b2:8f:46:1e:84:66:72:ea:b1:5f:09:3d:6e:
                    8e:38:6a:76:b4:6b:2c:d6:9d:37:ab:75:cf:88:f3:
                    3a:ee:f0:ae:80:d4:ba:26:6c:5d:65:1c:fc:45:5b:
                    42:f2:b3:c6:31:d0:23:28:46:45:62:38:26:3a:f9:
                    c5:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:FD:CD:16:A4:FD:88:A2:C1:27:2C:07:CE:48:02:FB:27:9C:4E:3F
            X509v3 Authority Key Identifier:
                keyid:50:E8:F0:4B:90:08:FE:A1:E5:C3:1F:64:E7:63:DA:DE:D2:53:A6:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A1630/15274F0E114111EF8F17870FC4F9AE02/UOjwS5AI_qHlwx9k52Pa3tJTpgw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UOjwS5AI_qHlwx9k52Pa3tJTpgw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1630/15274F0E114111EF8F17870FC4F9AE02/18141426114211EFA0FF3956C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.154.192.0/23
                IPv6:
                  2001:df3:cc40::/48

    Signature Algorithm: sha256WithRSAEncryption
         97:55:7f:b5:14:28:6d:dc:6a:ac:b0:6f:62:5b:97:48:77:66:
         74:4b:de:d6:92:c2:91:ee:60:ae:4a:92:58:2b:48:a1:21:f6:
         e4:ef:ac:59:ba:bb:08:81:71:af:31:9d:40:b1:6c:0d:0b:1c:
         70:8b:e9:c3:4e:ac:eb:23:10:5e:57:32:df:e7:80:19:e8:34:
         a6:60:22:8e:45:d8:d3:62:c0:ef:4c:da:c1:31:60:cc:8f:d9:
         48:67:68:88:76:f4:d8:91:8b:ac:28:dc:49:c1:db:69:47:b6:
         b4:fd:6d:4b:61:b9:bf:3c:f1:9c:6c:54:4f:bb:fe:1e:78:1c:
         22:2d:21:37:8a:85:f8:71:f0:b9:13:d6:1e:4f:78:9d:d1:b9:
         b3:b4:5b:d0:89:3d:da:47:f5:6a:75:49:11:d9:4c:a3:bd:d6:
         88:c6:b3:da:2d:32:69:26:bf:66:8e:7c:0e:30:0a:60:a3:83:
         7b:b4:5d:04:05:5d:08:73:b7:f9:8f:39:85:97:73:0a:c9:79:
         e1:0e:00:4a:91:cb:2c:f3:7f:30:bb:cf:57:a6:f8:55:6e:d9:
         39:d9:70:73:fc:b2:ff:58:e6:28:84:8e:af:58:56:22:dc:f9:
         23:fd:b9:ac:83:76:a9:c5:a6:37:24:e2:19:69:fa:7d:02:1b:
         4f:35:c7:64
-----BEGIN CERTIFICATE-----
MIIFTTCCBDWgAwIBAgICAYswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTE2MzAxMTAvBgNVBAUTKDUwRThGMDRCOTAwOEZFQTFFNUMzMUY2NEU3NjNEQURF
RDI1M0E2MEMwHhcNMjYwNjAxMDUzNjIxWhcNMjcwODMxMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTFkMWE1NS00ZGE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuxN0tVQgNJT//Za7MG889vGTvMP4K3MMgi8xv+t/tULWEdczrfQQzYuUMxmG
14gzSHqgyEINAI8nrT0tHDDTzhQrhF7lgWJ6pEx7IgNyUuPqMSrgY6mIi+YBLw7t
3cIj+9R5tL/V/dQ2yWiBIFS1UTD4sY+pD8vYm/wWXLylu2UZYIL17POu9g8SjUrb
7HVgzvESnl41ryHXJtV8hyIrKWZ1TyQNK6JECt1Q2wReNH1uJYgYtZjfFvnFMhrM
08/m0X8gqrKPRh6EZnLqsV8JPW6OOGp2tGss1p03q3XPiPM67vCugNS6JmxdZRz8
RVtC8rPGMdAjKEZFYjgmOvnF3QIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFMz9zRak
/YiiwScsB85IAvsnnE4/MB8GA1UdIwQYMBaAFFDo8EuQCP6h5cMfZOdj2t7SU6YM
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMTYzMC8xNTI3NEYwRTEx
NDExMUVGOEYxNzg3MEZDNEY5QUUwMi9VT2p3UzVBSV9xSGx3eDlrNTJQYTN0SlRw
Z3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1VPandTNUFJX3FIbHd4OWs1MlBhM3RKVHBndy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
QTE2MzAvMTUyNzRGMEUxMTQxMTFFRjhGMTc4NzBGQzRGOUFFMDIvMTgxNDE0MjYx
MTQyMTFFRkEwRkYzOTU2QzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM
BAIAATAGAwQBZ5rAMA8EAgACMAkDBwAgAQ3zzEAwDQYJKoZIhvcNAQELBQADggEB
AJdVf7UUKG3caqywb2Jbl0h3ZnRL3taSwpHuYK5KklgrSKEh9uTvrFm6uwiBca8x
nUCxbA0LHHCL6cNOrOsjEF5XMt/ngBnoNKZgIo5F2NNiwO9M2sExYMyP2UhnaIh2
9NiRi6wo3EnB22lHtrT9bUthub888ZxsVE+7/h54HCItITeKhfhx8LkT1h5PeJ3R
ubO0W9CJPdpH9Wp1SRHZTKO91ojGs9otMmkmv2aOfA4wCmCjg3u0XQQFXQhzt/mP
OYWXcwrJeeEOAEqRyyzzfzC7z1em+FVu2TnZcHP8sv9Y5iiEjq9YViLc+SP9uayD
dqnFpjck4hlp+n0CG081x2Q=
-----END CERTIFICATE-----
Generated at Sun Jun 14 01:37:49 2026 by rpki-client